- Pulse Secure Community
- :
- About flyddw
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
02-27-2013
10-30-2017
flyddw
Contributor
20
Posts
0
Kudos
2
Solutions
06-04-2013
08:11:AM
Yeah...but I don't trust it. Here's my setup: - 3 VM's running Win2k3 - a) FFT 2.4 on standard port 923 - b) FFT 2.4 on non-standard port 20 - c) FFT 2.6 on standard port 923 All three VM's are running on a pretty old server, and I want to install a better, faster server with a later version of Windows. These server only need to run FFT and send the files via SMB to other servers. I have found that I can create ONE pool with (a) and (b) together, and then create TWO VirtServ (x & y) to point to that pool. VS-x is on port 923 and VS-y is on port 20. I would then present to production use (once I get it working) ONE ip address with either port (923 or 20). Port 20 is used when 923 is blocked by whatever reason. Once this was working, I could then create an updated pool with new w2k8 VM's - all on the standard ports, and use the VirtServer (x & y) to get into via the different ports. All the new VM's would be interchangeable, and use shared disk space. So - to answer the question again - kinda. I've found these VirtServ settings: -New connection timeout is set to 0 seconds. -Existing connection timeout is set to 0 seconds. -Generic Client first ...tend to work. However, I think the VM's are being overrun, and they actually timeout (warning & errors on the Stingray) However, it DOES work, and allows a full transfer of over 5 minutes worth of data. I've also slowed the transfer down to force it to last longer than 5 minutes, and that works too. I just need it to work as well as a direct connection - which ALWAYS works. (sigh :-( )
... View more
05-28-2013
01:16:PM
I've changed it to "generic streaming" and it would transfer with 1 to 8 streams, fast, slow, consistent - till 5 minutes. Then it drops all connections and hangs. (Just FYI: when I connect directly to the FFT server, it will transfer completely, no matter how long it takes. That's how I know the STM is doing something in the middle). FYI #2: FFT works exactly like SCP (in the unix world). So, whatever setup would work for SCP, should work for FFT. I will now setup a SCP test.
... View more
05-28-2013
10:58:AM
Thanks for replying Mark. I'll try the "Generic Streaming" and report back. I was originally trying that, but figured, I'd used the client or server to be more specific. I actually started at the top and worked my way down till one of them worked ;-)
... View more
05-23-2013
09:35:AM
Spoke too soon. Damn! It uploaded for 5 minutes, then disconnected again.
... View more
05-23-2013
09:27:AM
I've got it to work, kinda. I've changed the max_reply_time to a day. It's not the best solution :-( -- How long the pool should wait for a response from the node before either discarding the request or trying another node (retryable requests only). max_reply_time: 86400 seconds
... View more
05-23-2013
07:16:AM
Here's the log from the STM: Virtual Server FFT2.4-vs "Read failure - Connection reset by peer" C 172.x.x.x:57266 155.X.X.6:923 "FFT2.4" "155.X.X.41:923" 53853 "-" r 3680 3680 880 880 4003 10 10 0
... View more
05-23-2013
07:10:AM
More information from the FFT server - It starts to transfer fine, but after about 30 seconds - closes the link (my guess from the Stingray to the server, not from the client to the stingray) 05/23 08:55:19.771-INFO (18) User requesting file upload of \00_ROADRUNNER-01\CentOS-6.4-i386-bin-DVD1.iso. 05/23 08:55:19.791-INFO (18) Upload with block_size=64512 actual_num_streams=8. 05/23 08:55:19.881-INFO (18) Transfer of \00_ROADRUNNER-01\CentOS-6.4-i386-bin-DVD1.iso (3770155008 bytes) from 155.X.X.10 05/23 08:55:19.901-INFO Received TCP connection from 155.X.X.10 05/23 08:55:20.142-INFO Received TCP connection from 155.X.X.10 05/23 08:55:20.142-INFO (18 #0) Successfully impersonating user. 05/23 08:55:20.362-INFO Received TCP connection from 155.X.X.10 05/23 08:55:20.372-INFO (18 #1) Successfully impersonating user. 05/23 08:55:20.692-INFO Received TCP connection from 155.X.X.10 05/23 08:55:20.692-INFO (18 #2) Successfully impersonating user. 05/23 08:55:20.843-INFO Received TCP connection from 155.X.X.10 05/23 08:55:21.003-INFO (18 #3) Successfully impersonating user. 05/23 08:55:21.103-INFO Received TCP connection from 155.X.X.10 05/23 08:55:21.123-INFO (18 #4) Successfully impersonating user. 05/23 08:55:21.444-INFO Received TCP connection from 155.X.X.10 05/23 08:55:21.454-INFO (18 #5) Successfully impersonating user. 05/23 08:55:21.624-INFO Received TCP connection from 155.X.X.10 05/23 08:55:21.634-INFO (18 #6) Successfully impersonating user. 05/23 08:55:21.924-INFO Received TCP connection from 155.X.X.10 05/23 08:55:21.924-INFO (18 #7) Successfully impersonating user. 05/23 08:55:54.694-INFO (18 #3) Client closed control stream 05/23 08:55:54.945-INFO (18 #2) Client closed control stream 05/23 08:55:55.085-INFO (18 #1) Client closed control stream 05/23 08:55:55.105-INFO (18 #7) Client closed control stream 05/23 08:55:55.135-INFO (18 #4) Client closed control stream
... View more
05-22-2013
08:24:AM
we have two different versions of the FFT - 2.4 and 2.6. After testing the 2.6, it's working ok (albeit not up to the speed I want). The 2.4 gets this error (obfuscated): 22/May/2013:11:16:21 -0400 Virtual Server FFT 2.4-20: "Read failure - Connection closed by peer" Source Address 172.x.x.x:54156 Destination Address 155.x.x.6:20 Pool FFT 2.4 Node 155.x.x.41:923 Local Port 38635 Rule - Connection State Reading from server Bytes from client 16486608 Bytes to server 16486608 Bytes from server 0 Bytes to client 0 Connection Established 33s Client Idle Time 0s Server Idle Time 0s Connection Retries 0 Response Code It never makes it pass 120MB transferred. Source: My desktop, Destination: STM, Node: FFT server.
... View more
05-21-2013
05:53:AM
Is there anything in the Stingray logging I can collect and share for further examination?
... View more
05-21-2013
05:49:AM
yeah, that was one of my first thoughts too - the tcpdump. but, it's a windows server and a windows client - and they are connected via switches (and I don't run the network) - so I can't stick anything in the middle to watch the traffic. I'll see what else I can come up with. But, about those first suggestions, where are those switches in the GUI I can change to allow connection status?
... View more
05-21-2013
04:15:AM
Fast File Transfer It's from Northrop Grumman Corporation. This is the best I can do, because I've never heard of it either. I'll be at my desk running more test later today.
... View more
05-20-2013
01:45:PM
Hello again :-) We have some servers that are doing FFT (Fast File Transfer) directly from clients. It's like an FTP connection (using port 923), except: - It can use more than one connection - It tries to push as much data as possible - It's tunable with timeout, packet size, delays, etc I am using the default setting on the client, and have not touched the server. When I directly connect to the server, I am able to log in, transfer a file, and close a connect perfectly fine. When I go through the STM, I am able to log in, start a transfer, and like 2.5 mins in, the server shows "client closed control stream" - but the client is still trying to send. I am using "(Generic client first)" connections (the only one that works) I know the STM is in-between the client and server, but it looks like the STM doesn't pass connection info back and forth. I think it a simple configuration switch on the STM, but I can't find it. I can try to find more info about FFT, but I think it's just a P2P bittorrent-like client/server (IE: instead of talk to lots of servers, only talks to one)
... View more
05-03-2013
07:21:AM
No CLI with the appliance, so I guess I can't disable it.Owen Garrett
... View more
05-01-2013
12:30:PM
Is it possible to disable the NTP server - not the client part - on a STM appliance? I found that I could sync the STM to a good NTP source, and then point all our production server to it to get the time. The network team suggests that we use that good source directly, and we disable the NTP server on the STM. I've looked through all the options, and I didn't find any radio button or option to turn it off, only a place to add server for it to sync to directly.
... View more
03-26-2013
06:11:AM
Hello, maybe a simple question / answer post. I was given a set of cipher cards and a serial card reader. They are marked THALES, and supposedly go with the STM appliance. If so, I can't find any reference to installation and use of this encryption techniques. The cards look to be the same size as a driver license, and I have 12 of them - six per appliance.
... View more
03-04-2013
11:12:AM
Owen, thank you very much. I am slowly making my way thru this neat software's manual. I thoroughly understand in principal how this stuff works, I just have to do the test cases to confirm my thoughts. I have to understand these appliances well enough to explain it to others. I have two ethernet ports configured (the console port and the web access port). Obviously, the console port won't route web traffic, but does the MAIN web access port do the traffic AND configurations? Do I need another?
... View more
03-04-2013
09:23:AM
I work with a segmented network, with firewalls between the segments. The firewall seem arbitrary right now, and I have no access to check them, Instead of dealing with the network team while I learn to configure and test our STM appliances, is it possible to configure TEST pools with external site (known to be working): - simply - without interfering with their real traffic Then, I can hit the STM address, and it would forward (connect) me with outside site. IE: hit the STM at http://192.168..1.1:80 and actually reach http://yahoo.com:80
... View more
02-28-2013
07:34:AM
Thanks again. I had to jump thru some physically hoops, but I took a laptop to the server, and forced a static IP of 192.168.1.200, and connected via web interface. I was then able to change the IP address, and can proceed to login from my desktop now. So...upward and onward to configuring it now. Thanks again. Derek
... View more
02-28-2013
06:13:AM
Thanks for answering. I've trying this last time, and since I'm using a Java KVM, I can't do a cut and paste. I've typed up what I saw: To configure this appliance, please visit the web-based Administration Server. 192.168.1.101 login: admin Password: Last Login: Wed Fed 27 13:52:22 PST 2013 on tty2 Last Login: 2013-02-27 21:52:22 -08000 from (Console) on zxtm. ------------------------------------------------------------------------- Stingray Traffic Manager Maintenance CLI Type 'help' for information on available commands. ------------------------------------------------------------------------- Maintenance ID: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx ------------------------------------------------------------------------- > z-set-initial-address Error: Unknown command 'z-set-initial-address'. Type 'help' for a list of available commands. > help help <command> Prints out help information on the supplied command. Commands: exit (logout, quit) firewall-clear info join-world networt-configure new-world racs reboot reset-to-factory-defaults restart rollback-delete rollback-list rollback-to shutdown start stop tcpdump trace world-status
... View more
02-27-2013
01:48:PM
Our company purchased two Cisco STM appliances (1u computers running STM only). It's in a datacenter without a DHCP server, so it took 192.168.1.100. I cannot configure it to accept a non 192.168.1.X address. It is version 8.3, and I cannot find any working documentation for this version - only 8.0, 9.0, and 9.1. a) How do I change the IP address if I only can connect via a console? b) Is it possible to upgrade to the latest, considering we just purchased the SW/HW?
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
